UPDATES

OVERVIEW

OWASP is now launching its Season of Code 2009 (OWASP SoC 09) with a provisional budget US$90,000, following the previous OWASP Summer of Code 2008, in which 33 projects were approved and a budget of more than US$125,000 have been made available, the OWASP Spring of Code 2007 (SpoC 07), in which 21 projects were sponsored with a budget of US$117,500, and the OWASP Autumn of Code 2006 (AoC 06), in which 9 projects were sponsored with a budget of US$20,000.

The OWASP SoC 2009 is an open sponsorship program were participants/developers are paid to work on OWASP (and web security) related projects. Although we welcome any project proposals (from improving Quality of existing OWASP projects to new innovative research), the areas below will be preferred:

OWASP Education Pack - The Education Committee

Enterprise usability of OWASP projects - Projects Committee

Additional Sources of Funding - Membership & Chapters Committee

Marketing & PR - Industry & Conferences Committee

Additional Sources of Funding - Membership & Chapters Committee

On the allocated projects areas the committees will be involved on the application selection and will act as the 2nd reviewer accordingly with the assessment criteria V2.

Joint proposals (up to 20k) are highly encouraged.

The OWASP SoC 2009 is also an opportunity for external individual or company sponsors to challenge the participants/developers to work in areas in which they are willing to invest additional funding - see OWASP Season of Code Sponsorship for further information.

WHO CAN APPLY?

The only requirement is that the candidate(s) show the potential to accomplish the project release's objectives/deliveries and the commitment to dedicate the time required to complete it within the SoC deadlines.

SELECTION CRITERIA

The participant must create a roadmap for the project release that includes technical requirements, functional requirements, and quality requirements. Preference will be given to proposals that use the existing OWASP Beta and Stable requirements for quality supplemented with their own technical and functional requirements.

There are two methods to select OWASP SoC 09 project releases:

By direct majority vote (5 out of 9) by the Jury;

By selection rating using the criteria defined below.

Each project release will receive a rating from 1 to 5 on the following categories by each Jury. The final result will be the total value.

Brand Value - How big is the potential added value to the OWASP Brand?

On the Candidate:

Past Work - Value of past contributions to OWASP Projects;

Deliverability - Proven capability to deliver;

Quality of Proposal - Global quality of the proposal submitted.

OPERATIONAL RULES

Proposals are submitted using online form (with all details publicly posted)

The participant should propose two reviewers (for details on the proposed reviewer responsibilities, see TDB see {assessment criteria reviewer role link})

Each and every project release should have its SoC Project Release page always completely updated with all information regarding the project release status.

The SoC Project Release's final deliveries will be evaluated by the assigned reviewers. However, the Jury will provide final oversight.

Payments will be made, via Pay Pal, in two instalments, respectively 50% halfway and 50% on completion of the project release. (basically, if you do not deliver you will NOT be paid)

GENERAL RULES

By taking part on OWASP SoC 09, the participant will authorize OWASP to host and advertise without any limitations his participation and all related contents including proposal and all deliveries.

All tools, documentation, or any other materials whatsoever, created by the participants within OWASP SoC 09 context must be released under an Open Source Initiative approved license. However, the participant may mirror development on her/his personal infrastructure at her/his option.

Participants and OWASP is free to use the results, including code, of the SoC's 09 code in any way they choose provided it is not in conflict with the license under which the code was developed.

Any situation arising not included in the above mentioned set of rules will be decided according to the discretionary judgement of OWASP Board.

OWASP SOC 09 BUDGET

The initial Budget for SoC 09 will be US$90,000, and it is funded by OWASP.

In parallel with the Request for Proposals, OWASP is also launching a sponsorship drive in which sponsors will have the option to choose which project releases they would like to support.

The funds available will be allocated to select project releases. However, strong proposals will be accepted by majority vote of the OWASP Board before the final application selection. Remaining budget will be allocated to remaining applications.

Note: The referred budget allocation is just a guideline and the final values will be adjusted based on the successful proposals.